Last updated: July 2026 · This is a starter policy — have it reviewed by legal counsel before production launch.
Account details (name, email, mobile), clinic verification data (clinic name, address, uploaded collateral), appointment records, and prescriptions generated by your doctor. Location is used only, with your permission, to show doctors near you.
To operate appointments, verification, prescriptions and notifications. We do not sell personal or health data. Verification collateral is used solely to confirm clinic authenticity.
Access follows strict roles: patients see their own records; doctors see patients they consult; clinics see their own operations; network admins see verification data. All access is enforced by server-side security rules and audit-logged.
Data is stored on Google Firebase (Firestore and Cloud Storage) with role-based rules. Payment processing (when live) is handled by Razorpay; we never store card numbers. All secret credentials remain server-side.
We use Google Analytics to understand how visitors use this site — which pages are viewed, and general usage patterns — so we can improve it. This does not include your medical records, prescriptions, or appointment details, which are never shared with Google Analytics. You can limit this by using your browser's "Do Not Track" setting or an ad-blocking extension, which most analytics tools respect.
You can update your profile anytime, request account deletion, and withdraw location permission from your browser. Prescription records may be retained where required by applicable healthcare regulation.
Questions about privacy: support@fixmyappointment.com.